A blogger detailed how they replaced their static site's contact form backend with Cloudflare Pages Functions, combining reCAPTCHA v3 (or optionally Cloudflare Turnstile) with the Resend email service to block spam submissions. The setup collects a visitor's name, email and message, then routes it through a Worker to a custom email address for filtering. The approach was inspired by a prior migration guide from Netlify to Cloudflare by developer Sia Karamalegos.
nooshu.com
· 2026-09-02
Cloudflare built a prototype called Cache Transcoding, developed during an intern project, that compresses eligible cached assets with Zstandard before writing them to disk inside its Pingora proxy. Assets stay compressed while stored and while moving between data centers via Tiered Cache, then get decoded only when served to the client. Early tests show this shrinks eligible assets to about a third of their original size with only a small CPU overhead.
blog.cloudflare.com
· 2026-09-01
Microsoft has identified a new ClickFix-style social engineering campaign called TerminalFix, which uses fake Cloudflare CAPTCHA prompts to trick users into pasting malicious commands into Windows Terminal or PowerShell. Once executed, the command triggers a multi-stage attack chain designed to give attackers a persistent foothold inside enterprise systems.
darkreading.com
· 2026-08-31
Microsoft has identified a new ClickFix-style attack called TerminalFix that uses fake Cloudflare CAPTCHA pages on compromised websites to trick users into pasting and running malicious PowerShell commands in Windows Terminal. Rather than deploying simple infostealers, the campaign runs a multi-stage chain that hides payloads inside PNG images via steganography, establishes persistence through scheduled tasks and registry keys, and ultimately installs a custom Python-based reverse tunnel into the victim's internal network.
bleepingcomputer.com
· 2026-08-31
Cloudflare reworked the Rust codebase powering its Big Pineapple DNS caching system, shrinking the average cache entry from 953 bytes to 420 bytes without adding any hardware. The changes—including replacing growable Vec and String types with fixed-size boxed slices and consolidating record storage into a single buffer—cut per-instance memory use from 9.3GB to 5.3GB while also boosting insert speed and lowering lookup latency.
techspot.com
· 2026-08-29
Cloudflare redesigned how DNS cache entries are stored in memory for its 1.1.1.1 resolver platform, Big Pineapple, cutting each entry's size from 953 bytes to 420 bytes. The changes, detailed by systems engineer Sebastiaan Neuteboom, involved five Rust-level optimizations including fixed-size data structures, merged record lists, and raw wire-format storage instead of padded fields.
tomshardware.com
· 2026-08-28
Cloudflare engineers made five successive changes to how DNS cache entries are stored in memory for Big Pineapple, the platform underlying 1.1.1.1 and related DNS services that hold over 250 billion cache entries at once. The changes shrank the per-entry memory footprint by more than half, freeing roughly 100 terabytes across the company's servers while also boosting insert throughput by 43% and cutting lookup latency by 19%.
blog.cloudflare.com
· 2026-08-27
Google has built Encrypted Client Hello (ECH) directly into Android 17, making it the first major mobile operating system to support the standard at the platform level and turning it on by default. ECH hides the specific website or domain a device is connecting to, so internet providers can only see the content delivery network being used, not the actual destination. Alphabet's Jigsaw division, which developed the feature, says it addresses a long-standing gap in HTTPS privacy protections.
engadget.com
· 2026-08-27
Security firm Tenet demonstrated at DEF CON 34 that an AI coding agent reviewing Cloudflare's blocked-request logs can be manipulated into executing a hidden attacker command embedded in a rejected request's header, using credentials the agent already holds. In testing, Claude Code running on Sonnet 4.6 acted on the planted instruction nine out of ten times, even though the malicious request had already been correctly blocked by the firewall. Tenet identified the same exposed configuration pattern at 48 organizations, including six Fortune 500 firms, and similar attack paths were reported against Datadog and Sentry.
venturebeat.com
· 2026-08-26
Researchers found threat actors uploading npm packages containing only a malicious HTML file disguised as a Cloudflare verification page. When mirrored by sites like UNPKG and npmmirror, these files become directly viewable in a browser under a trusted domain, redirecting victims to attacker-controlled sites. OX Security identified 24 such packages, following an earlier discovery in July involving a package called 'china_airlines'.
bleepingcomputer.com
· 2026-08-25
A new open-source project called Bookshelf offers a self-hosted ebook library that renders a single searchable page for EPUB and PDF files, with in-browser readers for each format. It can run as a Cloudflare Worker backed by R2 object storage or as a Node server reading from a local directory, and ships a Docker setup that bundles the cwebp and pdftoppm tools needed for proper cover generation.
github.com
· 2026-08-24
A new essay compares today's push for AI-readable documentation (AGENTS.md files) to the earlier evolution from manual server configuration to Kubernetes and serverless platforms. The author argues that just as Kubernetes didn't eliminate infrastructure work but abstracted it—moving focus from individual machines to workloads—AI agents are likely to automate lower-level tasks while engineers retain decision-making responsibility over higher-level architecture.
omegion.dev
· 2026-08-23
GoKawiil